[aw] Security Guard failed

#37 ...
#51 [cli-proxy] exporting to image
#51 exporting layers
#51 exporting layers 1.0s done
#51 writing image sha256:1980365ee68794560f1d661ee2a594e4a7e96231fd5c9098ca16ad71ee4f610b done
#51 naming to docker.io/library/awf-1787169250147-cli-proxy done
#51 DONE 1.0s
#52 [cli-proxy] resolving provenance for metadata file
#52 DONE 0.0s
#37 [agent stage-2  3/17] RUN set -eux;     force_archive_mirror() {       echo "Falling back to archive.ubuntu.com mirror..." >&2;       if [ -f /etc/apt/sources.list ]; then         sed -i 's|http://azure.archive.ubuntu.com|http://archive.ubuntu.com|g' /etc/apt/sources.list;         sed -i 's|http://security.ubuntu.com|http://archive.ubuntu.com|g' /etc/apt/sources.list 2>/dev/null || true;       fi;       if [ -d /etc/apt/sources.list.d ]; then         find /etc/apt/sources.list.d -name '*.sources' -exec           sed -i -e 's|http://azure.archive.ubuntu.com|http://archive.ubuntu.com|g'                  -e 's|http://security.ubuntu.com|http://archive.ubuntu.com|g' {} + 2>/dev/null || true;       fi;       rm -rf /var/lib/apt/lists/* &&         apt-get -o Acquire::Retries=3 -o Acquire::http::Timeout=30 -o Acquire::https::Timeout=30 update;     };     apt_update_retry() {       local i; for i in 1 2 3; do         rm -rf /var/lib/apt/lists/*;         if apt-get -o Acquire::Retries=3 -o Acquire::http::Timeout=30 -o Acquire::https::Timeout=30             update > /tmp/apt-update.log 2>&1; then           cat /tmp/apt-update.log;           if ! grep -q "Failed to fetch" /tmp/apt-update.log; then return 0; fi;         else           cat /tmp/apt-update.log;         fi;         echo "apt-get update attempt $i/3 failed or had fetch failures, retrying in $((i*10))s..." >&2; sleep $((i*10));       done;       echo "All apt-get update retries failed, falling back to archive.ubuntu.com..." >&2;       force_archive_mirror;     };     apt_install_retry() {       apt-get -o Acquire::Retries=3 -o Acquire::http::Timeout=30 -o Acquire::https::Timeout=30         install -y --no-install-recommends "$@" && return 0;       echo "apt-get install failed (likely mirror fetch timeout), forcing archive.ubuntu.com and retrying..." >&2;       force_archive_mirror;       apt-get -o Acquire::Retries=3 -o Acquire::http::Timeout=30 -o Acquire::https::Timeout=30         install -y --no-install-recommends "$@";     };     apt_upgrade_retry() {       apt-get -o Acquire::Retries=3 -o Acquire::http::Timeout=30 -o Acquire::https::Timeout=30         upgrade -y && return 0;       echo "apt-get upgrade failed (likely mirror fetch timeout), forcing archive.ubuntu.com and retrying..." >&2;       force_archive_mirror &&         apt-get -o Acquire::Retries=3 -o Acquire::http::Timeout=30 -o Acquire::https::Timeout=30 upgrade -y;     };     PKGS="iptables curl ca-certificates git gnupg dnsutils net-tools netcat-openbsd libcap2-bin libgdiplus libev-dev libssl-dev php-intl php-gd python3";     apt_update_retry &&     apt_install_retry $PKGS &&     apt_upgrade_retry &&     GOSU_VERSION="1.19" &&     GOSU_ARCH="$(dpkg --print-architecture)" &&     case "$GOSU_ARCH" in       amd64)   GOSU_SHA256="52c8749d0142edd234e9d6bd5237dff2d81e71f43537e2f4f66f75dd4b243dd0" ;;       arm64)   GOSU_SHA256="3a8ef022d82c0bc4a98bcb144e77da714c25fcfa64dccc57f6aba7ae47ff1a44" ;;       armhf)   GOSU_SHA256="8457a0bfd28e016c2c7d8ea6e5f7eed1376033ffbd36491bb455094c8b1dc9fd" ;;       armel)   GOSU_SHA256="6b6a27eb5b5f1efe74978f51aceb773cf004db34e9019f869c056ac8ebc232d9" ;;       ppc64el) GOSU_SHA256="52102a5903b79dcf6287cf1fbc3a3157393989195a8c95e4788556cd35650ae3" ;;       s390x)   GOSU_SHA256="6717b460d0b1a8fabbdca1fa3cbe7ea0e1c0d64f3ed252e1e1e101ed4e16d9e2" ;;       i386)    GOSU_SHA256="4b38085eecdf33a79b6a2f1df8d36e2a93c93346679106127fcbd605aebf01c9" ;;       riscv64) GOSU_SHA256="17ece9173569485c29875058d0edd4cd4a70c00f4cfa6a11b04050e25fda2297" ;;       *) echo "Unsupported architecture: $GOSU_ARCH" >&2; exit 1 ;;     esac &&     curl -fsSL "https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${GOSU_ARCH}"         -o /usr/local/bin/gosu &&     echo "${GOSU_SHA256}  /usr/local/bin/gosu" | sha256sum -c - &&     chmod +x /usr/local/bin/gosu &&     gosu --version &&     export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" &&     UNDER_QEMU=false &&     if [ -f /dev/.buildkit_qemu_emulator ] || [ -n "${QEMU_CPU:-}" ]; then UNDER_QEMU=true; fi &&     (apt-get remove -y nodejs npm || true) &&     NODE_VERSION="v22.23.2" &&     NODE_DPKG_ARCH="$(dpkg --print-architecture)" &&     case "$NODE_DPKG_ARCH" in       amd64) NODE_ARCH="x64";    NODE_SHA256="b294a556e639d64338823920e5866c21c02741742d2e1529ee1a225c1ec9252a" ;;       arm64) NODE_ARCH="arm64";  NODE_SHA256="013b59cfd2819703a6f4a14ab891fc46fc2a4e3f5bcd92de3fb4929b43e35b30" ;;       armhf) NODE_ARCH="armv7l"; NODE_SHA256="2a2f59eb8fd9dec27b3bee17c729131d1fd3e6d9943d479f1156ce38af8cd599" ;;       *) echo "Unsupported architecture for Node.js: $NODE_DPKG_ARCH" >&2; exit 1 ;;     esac &&     NODE_TARBALL="node-${NODE_VERSION}-linux-${NODE_ARCH}.tar.gz" &&     curl -fsSL "https://nodejs.org/dist/${NODE_VERSION}/${NODE_TARBALL}" -o "/tmp/${NODE_TARBALL}" &&     echo "${NODE_SHA256}  /tmp/${NODE_TARBALL}" | sha256sum -c - &&     tar -xzf "/tmp/${NODE_TARBALL}" -C /usr/local --strip-components=1 --no-same-owner &&     rm -f "/tmp/${NODE_TARBALL}" &&     if [ "$UNDER_QEMU" = "true" ]; then         echo "Skipping node --version check (QEMU emulation detected)" &&         test -x /usr/local/bin/node || (echo "ERROR: /usr/local/bin/node missing" && exit 1);     else         node --version | grep -qE '^v22\.23\.2' || (echo "ERROR: Node.js 22.23.2 not installed correctly" && exit 1) &&         npx --version || (echo "ERROR: npx not found" && exit 1);     fi &&     NPM_TGZ_URL="https://registry.npmjs.org/npm/-/npm-11.18.0.tgz" &&     NPM_TGZ_SHA256="73f6155215ebabf4ed96dca1f567c2372cc713c33af2e5b9b62fde4e92373e2e" &&     curl -fsSL "$NPM_TGZ_URL" -o /tmp/npm-11.18.0.tgz &&     echo "${NPM_TGZ_SHA256}  /tmp/npm-11.18.0.tgz" | sha256sum -c - &&     rm -rf /usr/lib/node_modules/npm /usr/local/lib/node_modules/npm &&     rm -f /usr/bin/npm /usr/bin/npx /usr/local/bin/npm /usr/local/bin/npx &&     mkdir -p /usr/local/lib/node_modules/npm &&     tar -xzf /tmp/npm-11.18.0.tgz -C /usr/local/lib/node_modules/npm --strip-components=1 &&     chmod +x /usr/local/lib/node_modules/npm/bin/npm-cli.js              /usr/local/lib/node_modules/npm/bin/npx-cli.js &&     ln -sf /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm &&     ln -sf /usr/local/lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx &&     if [ "$UNDER_QEMU" = "false" ]; then         npm --version | grep -qE '^11\.18\.0' || (echo "ERROR: npm 11.18.0 not installed correctly" && exit 1);     fi &&     rm -f /tmp/npm-11.18.0.tgz &&     rm -rf /var/lib/apt/lists/*